Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File:                     7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier:          LW4FCO4TrxmJhV1OKFcmPt1P0RZtB4OO+WfRe7rS9j4=
Subject key identifier:   C7:22:FD:70:6C:25:38:C5:41:AC:46:33:1E:5D:F9:67:0E:63:C3:74
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       35DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number:          3594
Signing time:             Wed 22 Jul 2026 14:53:14 +0000
Manifest this update:     Wed 22 Jul 2026 14:53:14 +0000
Manifest next update:     Wed 29 Jul 2026 14:53:14 +0000
Files and hashes:         1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: 5YZZEFQe4e4SawbxOu1IyqQ9EEMlwUOBGcEumq+jGQ0=)
                          2: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=)
                          3: F026CE74927411EDB020A481C4F9AE02.roa (hash: 1AaElHDkTEKXFD2hRezGGSYnw6xWVDkVzFuRAP8Q8Ic=)
                          4: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: W2SBGy0WMlElVPQX0czbiLooxC9uWPTo+MEamMh0ymA=)
                          5: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: dvlRe6H3F8B2GwYIE840UeTvVO5dQ86LFZ7LGPZOm2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13790 (0x35de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Jul 22 14:53:14 2026 GMT
            Not After : Jul 29 14:53:14 2026 GMT
        Subject: CN=6a60d95a-114f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:a3:68:c1:1e:e5:90:58:d3:a1:ff:62:a4:
                    21:54:84:2e:d6:ec:c8:f9:9b:03:14:00:48:56:2b:
                    c0:03:77:9c:c1:c2:99:cf:19:45:17:76:84:fb:31:
                    c7:e9:28:d9:47:a9:12:e6:0d:25:30:6f:fd:f4:af:
                    f0:88:bb:b6:3a:bc:74:2f:55:ff:f3:bc:25:53:72:
                    45:55:32:66:4a:03:e7:9b:26:31:98:46:47:24:62:
                    30:59:85:08:b6:6e:22:76:09:87:51:5a:00:c2:4d:
                    27:ae:12:21:b8:7b:ee:3b:e3:1a:71:1e:58:91:6e:
                    b6:75:9c:13:85:1f:cd:cb:d2:48:98:1c:31:db:cb:
                    d5:5c:f1:e6:8a:3f:b1:9b:59:55:de:3e:57:e2:8d:
                    36:61:62:60:3a:f0:7b:23:d5:d9:e9:a9:10:d8:72:
                    34:37:5f:d7:d2:6f:04:05:9f:2f:f3:79:11:b2:b2:
                    2b:f8:a3:de:ee:f8:16:b5:2d:49:ee:0b:df:bc:b2:
                    22:7c:a6:d9:50:3d:81:2c:68:60:d6:9f:f0:dc:a5:
                    b5:d6:3f:52:90:81:9f:c8:39:a8:3b:4a:64:91:c8:
                    12:c5:4c:bb:9b:b7:d8:55:cd:e9:ee:20:9f:d3:c3:
                    51:53:a7:01:36:12:a8:d2:a4:4f:c6:2c:f3:51:6a:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:22:FD:70:6C:25:38:C5:41:AC:46:33:1E:5D:F9:67:0E:63:C3:74
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7c:27:e6:ca:e9:92:38:27:df:0f:3a:d7:3a:12:50:d0:4c:
         57:71:04:54:b5:1a:c6:a8:77:66:15:61:65:ed:5c:59:ec:f3:
         6c:09:4d:cc:34:62:55:7b:eb:9d:8c:03:2f:e1:5a:c5:44:fd:
         a5:75:af:4f:da:ae:f7:97:52:98:20:3c:46:da:7d:80:66:fb:
         53:6b:99:ab:16:35:19:a0:ba:d3:22:33:86:6b:40:ed:6c:64:
         21:fe:a3:8c:41:66:5a:05:4d:89:1e:cb:0d:d2:1f:e5:c1:9e:
         1b:f9:1f:c4:2c:7f:20:c2:45:6a:50:66:a7:19:64:47:5f:c2:
         a9:c2:a3:d3:b8:4d:71:54:79:ef:0a:13:6b:44:31:da:2f:ce:
         33:7a:a0:3e:d4:16:ee:49:af:0b:a1:09:e9:4f:a3:56:d9:c4:
         ba:53:29:70:1e:76:4d:26:6d:d9:75:55:90:ed:a1:93:ca:a7:
         33:ca:f2:c9:dd:c9:10:46:a8:64:e3:6e:60:e7:ef:8d:fa:80:
         41:a7:80:e5:65:c9:7e:11:a3:c0:f7:11:dc:db:d1:b5:27:10:
         65:1d:c1:05:b7:2d:de:f1:2e:dd:31:50:4e:52:2c:5c:39:7d:
         5c:8b:8a:dc:a6:c2:14:b7:19:93:6c:ba:63:bb:bc:59:cc:5a:
         c6:02:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:23 2026 by rpki-client